Skip to content

dannysteenman/aws-toolbox

Repository files navigation

AWS Toolbox

AWS Toolbox 🧰

A Collection of Awesome Tools and Scripts for Cloud Engineers.

Table of Contents

Getting started

Shell & Python scripts categorized by AWS Service

General scripts

CloudFormation scripts

  • delete_stackset.py - Deletes all stack instances associated with a stackset and the stackset itself

CloudWatch scripts

  • set_cloudwatch_logs_retention.py - Sets a CloudWatch Logs Retention Policy to x number of days for all log groups in the region that you exported in your cli.

CodePipeline

  • slack_notification.py - Can be used in a lambda to enable AWS CodePipeline notifications on slack in a specific channel.

EC2 scripts

ECS scripts

EFS scripts

IAM scripts

  • delete_iam_user - This script deletes iam users.
  • key_rotator - This script rotates IAM user keys.
  • assume_role.sh - This script uses Simple Token Service (sts) to assume a role (on the destination account).

Organizations & IAM Identity Center scripts

  • assign_sso_access_by_ou.py - Assigns AWS Single Sign-On (SSO) access to a specified principal (user or group) for multiple AWS accounts within a specified Organizational Unit (OU).
  • import_users_to_aws_sso.py - Imports users and groups from a CSV file into AWS SSO and adding the users to their respective groups.
  • list_accounts_by_ou.py - Returns a list of acounts that are part of an Organizational Unit (OU)
  • list_accounts_sso_assignments.py - The script lists all AWS accounts along with their assigned users, groups, and permission sets in a structured JSON format.
  • remove_sso_access_by_ou.py - Removes AWS Single Sign-On (SSO) access to a specified principal (user or group) for multiple AWS accounts within a specified Organizational Unit (OU).

S3 scripts

SSM scripts

Tools

This list contains links to tools that automate or simplify the usage of AWS in the console, CLI or API's.

General

  • Steampipe - Query AWS resources in a SQL like fashion.
  • AWS Nuke - Remove all resources from an AWS account.

CI/CD

  • Awesome CI - List of Continuous Integration services.

EC2

  • AutoSpotting - AutoSpotting is the leading open source spot market automation tool, optimized towards quick/easy/frictionless adoption of the EC2 spot market at any scale.

ECS

  • Awesome ECS - A curated list of awesome ECS guides, development tools, and resources.
  • AWS Copilot CLI - The AWS Copilot CLI is a tool for developers to build, release and operate production ready containerized applications on Amazon ECS and AWS Fargate.
  • ECS Compose-X - A python app/lib to use your existing docker-compose files, add CFN resources definitions (or via Discovery) that takes care of all the complexity (IAM, Security Groups, Secrets, Volumes etc.) and generates curated CFN templates to deploy to AWS.

IAM

  • AWS IAM Actions - Website that contains every IAM action including a way to generate your own policy.
  • IAM Floyd - AWS IAM policy statement generator with fluent interface.
  • IAM Zero - IAM Zero detects identity and access management issues and automatically suggests least-privilege policies.

Infra as Code

  • Awesome CDK - Curated list of awesome AWS Cloud Development Kit (AWS CDK) open-source projects, guides, blogs and other resources.
  • Awesome CloudFormation - A curated list of resources and projects for working with AWS CloudFormation.
  • Awesome Terraform - Curated list of resources on HashiCorp's Terraform.
  • CDK Snippets - This extension adds L1 construct snippets from CDK into Visual Studio Code.
  • CloudFormation Snippets - This extension adds snippets for all the AWS CloudFormation resources into Visual Studio Code.
  • Former2 - Generate CloudFormation / Terraform / Troposphere templates from your existing AWS resources.
  • Open CDK Guide - This guide is an opinionated set of tips and best practices for working with the AWS Cloud Development Kit.

Lambda

  • AWS Lambda Power Tuning - AWS Lambda Power Tuning is a state machine powered by AWS Step Functions that helps you optimize your Lambda functions for cost and/or performance in a data-driven way.
  • Serverless Cost Calculator Comparison - Calculating the cost for AWS Lambda, Azure Functions, Google Cloud Functions. Providing good comparison or prediction on how the cost can vary depending on the memory, execution time, and number of executions on different cloud providers.
  • Serverless Cost Calculator - Estimate AWS costs when running serverless applications on AWS Lambda.

S3

  • s3s3mirror - A lightning-fast and highly concurrent utility for mirroring content from one S3 bucket to another.

Security

  • Leapp - Cross-platform APP to manage Programmatic access in AWS.
  • Prowler - Prowler is an Open Source Security tool to perform Cloud Security best practices assessments, audits, incident response, continuous monitoring, hardening and forensics readiness.
  • AWS Security Tools - A curated list of Security tools that you can use on AWS.

SSM

  • aws-gate - A Better AWS SSM Session manager CLI client.
  • aws-ssm-ec2-proxy-command - Open an SSH connection to your ec2 instances via AWS SSM without the need to open any ssh port in you security groups.
  • HQarroum/ssm-supercharged - AWS SSM integration with OpenSSH + EC2 Instance Connect + sshuttle.

Contributors

This project exists thanks to all the people who contribute.

Code Contributors

See how you can contribute to this repository.

Author

Danny Steenman


Support my work

If you found this project helpful, please consider showing your support by buying me a coffee.